[DIRSERVER-1744] Compex LDAP search filters returning unmatched objects

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0.0-M6
• Fix Version/s: 2.0.0-M8
• Component/s: ldap
• Environment: CentOS 5.6
• Assignee: Unassigned
• Reporter: Richard Hardy
• Created: 16/Aug/12 22:52
• Updated: 17/May/13 11:51
• Resolved: 02/Oct/12 20:12

Description

I used ApacheDirectoryStudio-linux-x86_64-2.0.0.v20120224 and created an Apache DS server with it. The root DSE reported version of this server is 2.0.0-M6.

The same problem is also present in the Apache DS bundled with ApacheDirectoryStudio-linux-x86_64-1.5.3.v20100330

I created the dc=example,dc=com context and the following group

dn: cn=g1,dc=example,dc=com
objectClass: groupOfNames
objectClass: top
member: dc=example,dc=com
cn: g1

I Searched with

ldapsearch -x -h localhost -p 10389 -D uid=admin,ou=system -w secret -b dc=example,dc=com '(&(objectclass=groupofnames)(owner=*))'

nothing is returned which is correct

ldapsearch -x -h localhost -p 10389 -D uid=admin,ou=system -w secret -b dc=example,dc=com '(&(|(objectclass=groupofnames))(owner=*))'

nothing is returned as expected

ldapsearch -x -h localhost -p 10389 -D uid=admin,ou=system -w secret -b dc=example,dc=com '(&(|(&(objectclass=groupofnames)))(owner=*))'

the group g1 is returned which is not expected, and other directories do not return objects with this same setup. The actual filters I want to use are more complicated than this, but this is the simplest one that demonstrates the issue.